Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/8IJ7OhJWqISbo_bGHpKxXu2Q7uU.roa
File: 8IJ7OhJWqISbo_bGHpKxXu2Q7uU.roa (raw, json)
Hash identifier: tN2xIVoeGJt+m5C9K8qrUxD3pDOmIZ4gNA35CYYYGYM=
Subject key identifier: F0:82:7B:3A:12:56:A8:84:9B:A3:F6:C6:1E:92:B1:5E:ED:90:EE:E5
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 01942746635FFCEF5749FB241137EDFA3DA8
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/8IJ7OhJWqISbo_bGHpKxXu2Q7uU.roa
Signing time: Thu 02 Jan 2025 13:48:31 +0000
ROA not before: Thu 02 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136258
IP address blocks: 45.154.204.0/24 maxlen: 24
45.154.205.0/24 maxlen: 24
45.154.206.0/24 maxlen: 24
45.154.207.0/24 maxlen: 24
195.137.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:63:5f:fc:ef:57:49:fb:24:11:37:ed:fa:3d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Jan 2 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0827b3a1256a8849ba3f6c61e92b15eed90eee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:00:3c:5d:c0:66:31:51:90:23:74:74:95:
0e:c6:2c:68:a0:b6:09:1f:72:fd:39:72:f7:c7:f4:
e5:32:ce:62:21:a5:87:19:be:b1:25:b4:38:dc:79:
b2:2b:5b:b3:80:74:c4:3c:81:7d:b6:34:5b:3a:fb:
5b:e1:ed:20:3d:07:56:13:d9:0f:fa:df:d9:a9:87:
6b:2f:08:6c:3a:0a:7d:7e:3e:0f:d9:d8:37:2c:c4:
34:b8:4c:55:46:81:e9:eb:9f:71:d8:e8:1c:3d:cb:
01:88:0a:a6:fd:09:32:20:0d:ed:a6:99:1e:f8:09:
d3:70:97:2d:f0:b7:3c:8f:ef:39:65:cb:f0:6f:17:
4d:59:cd:c8:27:af:7b:88:33:57:bb:e4:6f:0f:d4:
3f:cd:4a:fb:e5:8d:ba:77:2d:bd:db:5f:e6:9e:da:
e9:d9:ca:39:e6:e0:3a:94:20:8f:9d:04:c2:be:5d:
5f:07:0d:35:aa:b8:00:24:b7:91:46:44:5e:b6:a8:
e9:1b:70:a8:2d:1f:7f:df:ab:55:76:b5:49:e3:09:
6f:c0:27:21:42:f3:a8:e6:79:68:c9:86:7e:c9:b3:
f8:b8:a5:f6:f1:e4:fc:59:35:74:e2:01:c5:19:8d:
d9:42:83:e4:0d:ef:38:0e:79:1e:d9:a6:4d:e6:c0:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:82:7B:3A:12:56:A8:84:9B:A3:F6:C6:1E:92:B1:5E:ED:90:EE:E5
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/8IJ7OhJWqISbo_bGHpKxXu2Q7uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.204.0/22
195.137.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:bd:35:57:05:74:2e:55:ee:9a:1e:bc:8d:81:60:63:dd:e2:
c0:bd:68:a3:ab:3b:88:f5:5d:da:a3:77:4c:07:c8:97:90:e2:
f7:7e:f7:d3:29:06:70:24:ca:23:72:70:99:9e:a5:21:62:24:
2a:2f:de:0d:cf:05:56:f4:14:69:58:ab:60:97:64:69:e6:44:
60:9f:d8:d7:b6:d0:96:f5:9f:8e:1e:2c:ed:97:95:8b:2e:3b:
54:bd:9f:0a:64:4b:49:62:dc:1a:f7:ac:88:22:40:f8:f5:08:
2c:f1:2e:52:6d:dc:08:41:a5:82:dd:85:f2:15:78:70:88:80:
63:2b:14:69:0e:39:44:23:2d:47:5f:b0:12:90:4f:d5:ac:36:
a4:8f:ff:0d:d2:9d:2c:c2:9a:b1:66:4d:9e:ba:21:fb:09:43:
62:a0:2a:2b:12:9a:25:66:fc:a2:fa:55:7b:94:7a:5e:23:93:
34:b9:28:7c:55:1c:28:70:e9:a2:37:0a:53:18:b9:72:d3:14:
13:44:2b:60:df:e8:d3:45:9f:37:9a:38:78:b2:eb:5e:d6:d3:
a1:70:0a:f3:c7:82:65:b7:07:5f:20:af:4b:87:c1:1f:05:3d:
fc:1e:f4:34:f7:88:c4:e7:8f:7b:62:7a:fe:8f:f1:c3:83:63:
aa:a4:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:48:12 2025 by rpki-client